> On 23 Jan 2020, at 14:11, S Moonesamy <[email protected]> wrote:
> 
> Dear Sara,
> At 05:15 AM 23-01-2020, Sara Dickinson wrote:
>> > Section 3.2 discusses what a user does and use a DNS query related to 
>> > email as an example.  Is the MUA expected to validated the MX RR or is it 
>> > the role of the MSA?
>> 
>> I think questions of validation are out of scope for this draft.
> 
> Apologies for not explaining this correctly.  The draft is described as a 
> document about the use of DNS.  Section 3.2 has the following: "It gives 
> information about what the user does ("What are the MX records of 
> example.net?" means he probably wants to send email to someone at example.net 
> ..."  My question was about that DNS query.  Could you or the WG Chairs 
> please explain why the question which I asked is out of scope for this draft?

Thanks to Brian for his explanation on this point which I agree with.

> 
>> Looking back, this text was introduced into the original I-D before RFC7624 
>> was published and wasn't updated. Suggest:
>> 
>> OLD: The IAB privacy and security program also have a work in progress 
>> [RFC7624] that considers such inference-based attacks in a more general 
>> framework.
>> 
>> OLD: The IAB privacy and security program has also produced [RFC7624] that 
>> considers such inference-based attacks in a more general framework."
> 
> I gather that you meant "NEW" for the second part.  I am okay with that text.

Yes :-)

> 
>> The text says "to our knowledge"; no DPRIVE or IETF review comment to date 
>> (or errata to RFC7626) has contradicted this statement so I think it is a 
>> fair representation of the community knowledge on this matter. If you are 
>> aware of such a law please suggest text.
> 
> I asked whether there was a study.  According to the above, it is what the 
> DPRIVE Working Group believes even though there wasn't any study.  I would 
> like to thank you for the response as it addresses my question.

Ah, you were asking if there was a specific citation that could be included… 
No, not to my knowledge. 

Thanks for your response.

Sara. 

_______________________________________________
dns-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dns-privacy

Reply via email to